CVE-2007-5497

e2fsprogs multiple integer overflows

Severity Score

5.8

*CVSS v2

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

*SSVC

Descriptions

Multiple integer overflows in libext2fs in e2fsprogs before 1.40.3 allow user-assisted remote attackers to execute arbitrary code via a crafted filesystem image.

Múltiples desbordamientos enteros en libext2fs en e2fsprogs versiones anteriores a 1.40.3, permiten a los atacantes remotos asistidos por el usuario ejecutar código arbitrario por medio de una imagen del sistema de archivos especialmente diseñada.

*Credits: N/A

CVSS Scores

NISTv2 5.8

Attack Vector

Network

Attack Complexity

Medium

Authentication

None

Confidentiality

Partial

Integrity

Partial

Availability

None

* Common Vulnerability Scoring System

SSVC

Decision:-

Exploitation

Automatable

Tech. Impact

* Organization's Worst-case Scenario

Timeline

2007-10-17 CVE Reserved
2007-12-07 CVE Published
2024-08-07 CVE Updated
2024-09-02 EPSS Updated
---------- Exploited in Wild
---------- KEV Due Date
---------- First Exploit

CWE

CWE-189: Numeric Errors
CWE-190: Integer Overflow or Wraparound

CAPEC

References (38)

URL	Tag	Source
http://lists.vmware.com/pipermail/security-announce/2008/000007.html	Mailing List
http://secunia.com/advisories/32774	Third Party Advisory
http://sourceforge.net/project/shownotes.php?release_id=560230&group_id=2406	X_refsource_confirm
http://support.avaya.com/elmodocs2/security/ASA-2008-040.htm	X_refsource_confirm
http://support.citrix.com/article/CTX118766	X_refsource_confirm
http://wiki.rpath.com/Advisories:rPSA-2007-0262	X_refsource_confirm
http://www.securityfocus.com/archive/1/487999/100/0/threaded	Mailing List
http://www.securityfocus.com/archive/1/489082/100/0/threaded	Mailing List
http://www.securityfocus.com/bid/26772	Vdb Entry
http://www.securitytracker.com/id?1019537	Vdb Entry
http://www.vmware.com/security/advisories/VMSA-2008-0004.html	X_refsource_confirm
https://exchange.xforce.ibmcloud.com/vulnerabilities/38903	Vdb Entry
https://issues.rpath.com/browse/RPL-2011	X_refsource_confirm
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10399	Signature

URL	Date	SRC

URL	Date	SRC

URL	Date	SRC
http://itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02286083	2023-02-13
http://secunia.com/advisories/27889	2023-02-13
http://secunia.com/advisories/27965	2023-02-13
http://secunia.com/advisories/27987	2023-02-13
http://secunia.com/advisories/28000	2023-02-13
http://secunia.com/advisories/28030	2023-02-13
http://secunia.com/advisories/28042	2023-02-13
http://secunia.com/advisories/28360	2023-02-13
http://secunia.com/advisories/28541	2023-02-13
http://secunia.com/advisories/28648	2023-02-13
http://secunia.com/advisories/29224	2023-02-13
http://secunia.com/advisories/40551	2023-02-13
http://www.debian.org/security/2007/dsa-1422	2023-02-13
http://www.mandriva.com/security/advisories?name=MDKSA-2007:242	2023-02-13
http://www.novell.com/linux/security/advisories/2007_25_sr.html	2023-02-13
http://www.redhat.com/support/errata/RHSA-2008-0003.html	2023-02-13
http://www.ubuntu.com/usn/usn-555-1	2023-02-13
http://www.vupen.com/english/advisories/2007/4135	2023-02-13
http://www.vupen.com/english/advisories/2008/0761	2023-02-13
http://www.vupen.com/english/advisories/2010/1796	2023-02-13
https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00618.html	2023-02-13
https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00629.html	2023-02-13
https://access.redhat.com/security/cve/CVE-2007-5497	2008-01-07
https://bugzilla.redhat.com/show_bug.cgi?id=403441	2008-01-07

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Ext2 Filesystems Utilities Search vendor "Ext2 Filesystems Utilities"		E2fsprogs Search vendor "Ext2 Filesystems Utilities" for product "E2fsprogs"				<= 1.40.2 Search vendor "Ext2 Filesystems Utilities" for product "E2fsprogs" and version " <= 1.40.2"		-		Affected
Ext2 Filesystems Utilities Search vendor "Ext2 Filesystems Utilities"		E2fsprogs Search vendor "Ext2 Filesystems Utilities" for product "E2fsprogs"				1.02 Search vendor "Ext2 Filesystems Utilities" for product "E2fsprogs" and version "1.02"		-		Affected
Ext2 Filesystems Utilities Search vendor "Ext2 Filesystems Utilities"		E2fsprogs Search vendor "Ext2 Filesystems Utilities" for product "E2fsprogs"				1.03 Search vendor "Ext2 Filesystems Utilities" for product "E2fsprogs" and version "1.03"		-		Affected
Ext2 Filesystems Utilities Search vendor "Ext2 Filesystems Utilities"		E2fsprogs Search vendor "Ext2 Filesystems Utilities" for product "E2fsprogs"				1.04 Search vendor "Ext2 Filesystems Utilities" for product "E2fsprogs" and version "1.04"		-		Affected
Ext2 Filesystems Utilities Search vendor "Ext2 Filesystems Utilities"		E2fsprogs Search vendor "Ext2 Filesystems Utilities" for product "E2fsprogs"				1.05 Search vendor "Ext2 Filesystems Utilities" for product "E2fsprogs" and version "1.05"		-		Affected
Ext2 Filesystems Utilities Search vendor "Ext2 Filesystems Utilities"		E2fsprogs Search vendor "Ext2 Filesystems Utilities" for product "E2fsprogs"				1.06 Search vendor "Ext2 Filesystems Utilities" for product "E2fsprogs" and version "1.06"		-		Affected
Ext2 Filesystems Utilities Search vendor "Ext2 Filesystems Utilities"		E2fsprogs Search vendor "Ext2 Filesystems Utilities" for product "E2fsprogs"				1.07 Search vendor "Ext2 Filesystems Utilities" for product "E2fsprogs" and version "1.07"		-		Affected
Ext2 Filesystems Utilities Search vendor "Ext2 Filesystems Utilities"		E2fsprogs Search vendor "Ext2 Filesystems Utilities" for product "E2fsprogs"				1.08 Search vendor "Ext2 Filesystems Utilities" for product "E2fsprogs" and version "1.08"		-		Affected
Ext2 Filesystems Utilities Search vendor "Ext2 Filesystems Utilities"		E2fsprogs Search vendor "Ext2 Filesystems Utilities" for product "E2fsprogs"				1.09 Search vendor "Ext2 Filesystems Utilities" for product "E2fsprogs" and version "1.09"		-		Affected
Ext2 Filesystems Utilities Search vendor "Ext2 Filesystems Utilities"		E2fsprogs Search vendor "Ext2 Filesystems Utilities" for product "E2fsprogs"				1.10 Search vendor "Ext2 Filesystems Utilities" for product "E2fsprogs" and version "1.10"		-		Affected
Ext2 Filesystems Utilities Search vendor "Ext2 Filesystems Utilities"		E2fsprogs Search vendor "Ext2 Filesystems Utilities" for product "E2fsprogs"				1.11 Search vendor "Ext2 Filesystems Utilities" for product "E2fsprogs" and version "1.11"		-		Affected
Ext2 Filesystems Utilities Search vendor "Ext2 Filesystems Utilities"		E2fsprogs Search vendor "Ext2 Filesystems Utilities" for product "E2fsprogs"				1.12 Search vendor "Ext2 Filesystems Utilities" for product "E2fsprogs" and version "1.12"		-		Affected
Ext2 Filesystems Utilities Search vendor "Ext2 Filesystems Utilities"		E2fsprogs Search vendor "Ext2 Filesystems Utilities" for product "E2fsprogs"				1.13 Search vendor "Ext2 Filesystems Utilities" for product "E2fsprogs" and version "1.13"		-		Affected
Ext2 Filesystems Utilities Search vendor "Ext2 Filesystems Utilities"		E2fsprogs Search vendor "Ext2 Filesystems Utilities" for product "E2fsprogs"				1.14 Search vendor "Ext2 Filesystems Utilities" for product "E2fsprogs" and version "1.14"		-		Affected
Ext2 Filesystems Utilities Search vendor "Ext2 Filesystems Utilities"		E2fsprogs Search vendor "Ext2 Filesystems Utilities" for product "E2fsprogs"				1.15 Search vendor "Ext2 Filesystems Utilities" for product "E2fsprogs" and version "1.15"		-		Affected
Ext2 Filesystems Utilities Search vendor "Ext2 Filesystems Utilities"		E2fsprogs Search vendor "Ext2 Filesystems Utilities" for product "E2fsprogs"				1.16 Search vendor "Ext2 Filesystems Utilities" for product "E2fsprogs" and version "1.16"		-		Affected
Ext2 Filesystems Utilities Search vendor "Ext2 Filesystems Utilities"		E2fsprogs Search vendor "Ext2 Filesystems Utilities" for product "E2fsprogs"				1.17 Search vendor "Ext2 Filesystems Utilities" for product "E2fsprogs" and version "1.17"		-		Affected
Ext2 Filesystems Utilities Search vendor "Ext2 Filesystems Utilities"		E2fsprogs Search vendor "Ext2 Filesystems Utilities" for product "E2fsprogs"				1.18 Search vendor "Ext2 Filesystems Utilities" for product "E2fsprogs" and version "1.18"		-		Affected
Ext2 Filesystems Utilities Search vendor "Ext2 Filesystems Utilities"		E2fsprogs Search vendor "Ext2 Filesystems Utilities" for product "E2fsprogs"				1.19 Search vendor "Ext2 Filesystems Utilities" for product "E2fsprogs" and version "1.19"		-		Affected
Ext2 Filesystems Utilities Search vendor "Ext2 Filesystems Utilities"		E2fsprogs Search vendor "Ext2 Filesystems Utilities" for product "E2fsprogs"				1.20 Search vendor "Ext2 Filesystems Utilities" for product "E2fsprogs" and version "1.20"		-		Affected
Ext2 Filesystems Utilities Search vendor "Ext2 Filesystems Utilities"		E2fsprogs Search vendor "Ext2 Filesystems Utilities" for product "E2fsprogs"				1.21 Search vendor "Ext2 Filesystems Utilities" for product "E2fsprogs" and version "1.21"		-		Affected
Ext2 Filesystems Utilities Search vendor "Ext2 Filesystems Utilities"		E2fsprogs Search vendor "Ext2 Filesystems Utilities" for product "E2fsprogs"				1.22 Search vendor "Ext2 Filesystems Utilities" for product "E2fsprogs" and version "1.22"		-		Affected
Ext2 Filesystems Utilities Search vendor "Ext2 Filesystems Utilities"		E2fsprogs Search vendor "Ext2 Filesystems Utilities" for product "E2fsprogs"				1.23 Search vendor "Ext2 Filesystems Utilities" for product "E2fsprogs" and version "1.23"		-		Affected
Ext2 Filesystems Utilities Search vendor "Ext2 Filesystems Utilities"		E2fsprogs Search vendor "Ext2 Filesystems Utilities" for product "E2fsprogs"				1.24 Search vendor "Ext2 Filesystems Utilities" for product "E2fsprogs" and version "1.24"		-		Affected
Ext2 Filesystems Utilities Search vendor "Ext2 Filesystems Utilities"		E2fsprogs Search vendor "Ext2 Filesystems Utilities" for product "E2fsprogs"				1.25 Search vendor "Ext2 Filesystems Utilities" for product "E2fsprogs" and version "1.25"		-		Affected
Ext2 Filesystems Utilities Search vendor "Ext2 Filesystems Utilities"		E2fsprogs Search vendor "Ext2 Filesystems Utilities" for product "E2fsprogs"				1.26 Search vendor "Ext2 Filesystems Utilities" for product "E2fsprogs" and version "1.26"		-		Affected
Ext2 Filesystems Utilities Search vendor "Ext2 Filesystems Utilities"		E2fsprogs Search vendor "Ext2 Filesystems Utilities" for product "E2fsprogs"				1.27 Search vendor "Ext2 Filesystems Utilities" for product "E2fsprogs" and version "1.27"		-		Affected
Ext2 Filesystems Utilities Search vendor "Ext2 Filesystems Utilities"		E2fsprogs Search vendor "Ext2 Filesystems Utilities" for product "E2fsprogs"				1.28 Search vendor "Ext2 Filesystems Utilities" for product "E2fsprogs" and version "1.28"		-		Affected
Ext2 Filesystems Utilities Search vendor "Ext2 Filesystems Utilities"		E2fsprogs Search vendor "Ext2 Filesystems Utilities" for product "E2fsprogs"				1.29 Search vendor "Ext2 Filesystems Utilities" for product "E2fsprogs" and version "1.29"		-		Affected
Ext2 Filesystems Utilities Search vendor "Ext2 Filesystems Utilities"		E2fsprogs Search vendor "Ext2 Filesystems Utilities" for product "E2fsprogs"				1.30 Search vendor "Ext2 Filesystems Utilities" for product "E2fsprogs" and version "1.30"		-		Affected
Ext2 Filesystems Utilities Search vendor "Ext2 Filesystems Utilities"		E2fsprogs Search vendor "Ext2 Filesystems Utilities" for product "E2fsprogs"				1.31 Search vendor "Ext2 Filesystems Utilities" for product "E2fsprogs" and version "1.31"		-		Affected
Ext2 Filesystems Utilities Search vendor "Ext2 Filesystems Utilities"		E2fsprogs Search vendor "Ext2 Filesystems Utilities" for product "E2fsprogs"				1.32 Search vendor "Ext2 Filesystems Utilities" for product "E2fsprogs" and version "1.32"		-		Affected
Ext2 Filesystems Utilities Search vendor "Ext2 Filesystems Utilities"		E2fsprogs Search vendor "Ext2 Filesystems Utilities" for product "E2fsprogs"				1.33 Search vendor "Ext2 Filesystems Utilities" for product "E2fsprogs" and version "1.33"		-		Affected
Ext2 Filesystems Utilities Search vendor "Ext2 Filesystems Utilities"		E2fsprogs Search vendor "Ext2 Filesystems Utilities" for product "E2fsprogs"				1.34 Search vendor "Ext2 Filesystems Utilities" for product "E2fsprogs" and version "1.34"		-		Affected
Ext2 Filesystems Utilities Search vendor "Ext2 Filesystems Utilities"		E2fsprogs Search vendor "Ext2 Filesystems Utilities" for product "E2fsprogs"				1.35 Search vendor "Ext2 Filesystems Utilities" for product "E2fsprogs" and version "1.35"		-		Affected
Ext2 Filesystems Utilities Search vendor "Ext2 Filesystems Utilities"		E2fsprogs Search vendor "Ext2 Filesystems Utilities" for product "E2fsprogs"				1.36 Search vendor "Ext2 Filesystems Utilities" for product "E2fsprogs" and version "1.36"		-		Affected
Ext2 Filesystems Utilities Search vendor "Ext2 Filesystems Utilities"		E2fsprogs Search vendor "Ext2 Filesystems Utilities" for product "E2fsprogs"				1.37 Search vendor "Ext2 Filesystems Utilities" for product "E2fsprogs" and version "1.37"		-		Affected
Ext2 Filesystems Utilities Search vendor "Ext2 Filesystems Utilities"		E2fsprogs Search vendor "Ext2 Filesystems Utilities" for product "E2fsprogs"				1.38 Search vendor "Ext2 Filesystems Utilities" for product "E2fsprogs" and version "1.38"		-		Affected
Ext2 Filesystems Utilities Search vendor "Ext2 Filesystems Utilities"		E2fsprogs Search vendor "Ext2 Filesystems Utilities" for product "E2fsprogs"				1.39 Search vendor "Ext2 Filesystems Utilities" for product "E2fsprogs" and version "1.39"		-		Affected
Ext2 Filesystems Utilities Search vendor "Ext2 Filesystems Utilities"		E2fsprogs Search vendor "Ext2 Filesystems Utilities" for product "E2fsprogs"				1.40 Search vendor "Ext2 Filesystems Utilities" for product "E2fsprogs" and version "1.40"		-		Affected
Ext2 Filesystems Utilities Search vendor "Ext2 Filesystems Utilities"		E2fsprogs Search vendor "Ext2 Filesystems Utilities" for product "E2fsprogs"				1.40.1 Search vendor "Ext2 Filesystems Utilities" for product "E2fsprogs" and version "1.40.1"		-		Affected